SOC-HUB // OPERATIONAL Thu 01 Oct 2026 · UTC
⚠ Live Threats
Rapid7 Cybersecurity · Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Rapid7 Cybersecurity · Higher education is under siege, and fragmented security is making it harder to respondCISA · CISA Adds One Known Exploited Vulnerability to Catalog  ZDI: Published · ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution VulnerabilityZDI: Published · ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution VulnerabilityICS Advisories · Baicells Nova 430HICS Advisories · Toptech TMS7 and TopHATICS Advisories · Lantronix G520 Series Cellular Gateway
OPERATIONAL // BLUE TEAM

The one stop shop for SOC analysts.

Knowledge base, playbooks, live threat intel, tools and jobs. Everything a defender needs to triage faster and grow from L1 to L3, in one place.

Explore Knowledge Base → Live Threat Intel
1
KB Articles
0
IR Playbooks
0
Tools
0
Open Roles
// Knowledge Base

Ten domains, one curriculum

View all
📊 SIEM 0 articles 🔎 DFIR 0 articles 🎯 Threat Hunting 0 articles ☁ Cloud Security 0 articles 🌐 Network 0 articles 🦠 Malware Analysis 0 articles 📧 Phishing 0 articles 🔐 Identity / IAM 0 articles 🚨 Incident Response 0 articles 🕵 OSINT 0 articles
// From Team SOC Analysts

Latest analysis

All articles
// Uncategorized
Uncategorized

Hello world!

Welcome to WordPress. This is your first post. Edit or delete it, then start writing!

By Team SOC Analysts · 1 min read
// Aggregated

Cyber News

More
// Feed temporarily unavailable. Verify feed URLs under Customize › SOC-Hub Feeds.
// Advisories

Vulnerabilities & Threats

More
Rapid7 Cybersecurity30 Sep 15:09
Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)
Rapid7 Cybersecurity30 Sep 14:16
Higher education is under siege, and fragmented security is making it harder to respond
CISA30 Sep 12:00
CISA Adds One Known Exploited Vulnerability to Catalog  
ZDI: Published30 Sep 05:00
ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI: Published30 Sep 05:00
ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability
ICS Advisories29 Sep 12:00
Baicells Nova 430H
// JOIN THE SHIFT

Bookmark SOC-Hub. Start your next shift here.

News, CVEs, playbooks and tradecraft, refreshed continuously and curated for working analysts.

Start reading →